Negotiable
Undetermined
Remote
Remote or Austin, Texas
Summary: The Governance, Risk & Compliance (GRC) Risk Register Analyst is responsible for designing, implementing, and operationalizing enterprise risk management processes. This role emphasizes building risk governance frameworks, developing risk scoring methodologies, and fostering sustainable risk management practices across the organization. The position is fully remote and requires collaboration with various teams to enhance risk management strategies. The ideal candidate will have extensive experience in GRC and risk management.
Key Responsibilities:
- Define end-to-end risk governance workflows including intake, validation, mitigation, and monitoring
- Establish roles, responsibilities, and decision-making structures for risk management
- Design escalation and reporting processes for high-risk scenarios
- Collaborate with business, technology, and security teams
- Facilitate workshops and working sessions to drive adoption of risk practices
- Support organization-wide implementation of risk register processes
- Develop standardized risk register structure, taxonomy, and documentation
- Support onboarding and documentation of enterprise risks
- Align risk processes with overall cybersecurity and risk posture
- Create audit-ready documentation for frameworks, scoring models, and workflows
- Document governance structures, decision authorities, and operational procedures
- Provide knowledge transfer and training to internal teams
Key Skills:
- 8+ years of experience in GRC, risk management, or information security
- Strong experience in risk register design and framework development
- Expertise in risk scoring, prioritization models, and governance workflows
- Proven stakeholder engagement and facilitation experience
- Strong documentation and knowledge transfer skills
Salary (Rate): undetermined
City: undetermined
Country: undetermined
Working Arrangements: remote
IR35 Status: undetermined
Seniority Level: undetermined
Industry: Other
Job Title: Governance, Risk & Compliance (GRC) Risk Register Analyst
Location: 100% Remote (U.S. Only)
Job Description:
We are seeking an experienced GRC Risk Register Analyst to design, implement, and operationalize enterprise risk management processes. This role will focus on building risk governance frameworks, developing risk scoring methodologies, and enabling sustainable risk management practices across enterprise environments.
Key Responsibilities:
Risk Framework & Governance
- Define end-to-end risk governance workflows including intake, validation, mitigation, and monitoring
- Establish roles, responsibilities, and decision-making structures for risk management
- Design escalation and reporting processes for high-risk scenarios
Stakeholder Engagement
- Collaborate with business, technology, and security teams
- Facilitate workshops and working sessions to drive adoption of risk practices
- Support organization-wide implementation of risk register processes
Risk Register Development
- Develop standardized risk register structure, taxonomy, and documentation
- Support onboarding and documentation of enterprise risks
- Align risk processes with overall cybersecurity and risk posture
Documentation & Knowledge Transfer
- Create audit-ready documentation for frameworks, scoring models, and workflows
- Document governance structures, decision authorities, and operational procedures
- Provide knowledge transfer and training to internal teams
Deliverables:
- Enterprise Risk Register Framework
- Risk Scoring & Prioritization Model
- Risk Governance Model (workflows, roles, escalation paths)
- Initial Risk Register Population
- Final Documentation Package with operational guidance
Required Qualifications:
- 8+ years of experience in GRC, risk management, or information security
- Strong experience in risk register design and framework development
- Expertise in risk scoring, prioritization models, and governance workflows
- Proven stakeholder engagement and facilitation experience
- Strong documentation and knowledge transfer skills